p-adic properties of division polynomials and elliptic 
divisibility sequences 

JOSEPH H. SILVERMAN 

Abstract. For a fixed rational point P e E(K) on an elliptic 
curve, we consider the sequence of values (F ra (P)) n>1 of the divi- 
sion polynomials of E at P. For a finite field K/¥ p , we prove that 
the sequence is periodic. For a local field K/<Q) p , we prove (under 
certain hypotheses) that there is a power q — p e so that for all 
m > 1, the limit of F mq k (P) as k — > oo exists in K and is algebraic 
over Q(E). We apply this result to prove an analogous p-adic limit 
and algebraicity result for elliptic divisibility sequences. 
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Introduction 

Let E/K be an elliptic curve given by a Weierstrass equation 

E : y 2 + a\xy + a$y = x 3 + a2X 2 + a 4 x + a^, 

and let z = —x/y be the usual uniformizer at O. The n-division 
polynomial F n of E is the function F n G y] C K(E) with divisor 

(F„) = M*(0)-n 2 (0), 

suitably normalized at (see Definition [IJ. Division polynomials play 
for elliptic curves the role that is played by the polynomials X n — 1 for 
the multiplicative group. 

Complex analytically the n-division polynomial of an elliptic curve 
C/L is equal to the quotient a(n(, L)/a(C, L) n of Weierstrass a-func- 
tions [2H1 Chapter XX, Misc. examples 24 and 33]. Division polynomi- 
als play a prominent role in the theory of elliptic functions and elliptic 
curves, appearing in the elliiptic addition law, in the theory of complex 
multiplication, in transformation formulas for canonical local heights, 
in the theory of elliptic divisibility sequences, and in the cryptograph- 
ically important SEA algorithm of Schoof, Elkies, and Atkins |To^ ITo] 
for counting points on elliptic curves over F p . 

In this paper we study the sequence of values (F n (P)) n >i of the 
division polynomials evaluated at a point P G E(K). We will be 
especially interested in periodicity properties when K is a finite ring 
or finite field and in convergence properties when K is a complete 
local field. We now describe special cases of our three main theorems 
for F p , Z/p M Z, and Q p . See Corollary^! Theorem IT2*1 and Theorem ITU 
for general statements. 

Theorem 1. Let E/¥ p be an elliptic curve and let P G E(¥ p ) be a point 
of exact order r > 2. Then the sequence (F n (P)) n >o is periodic with 
period rt for some integer t dividing p — 1 if r > 3 and dividing 2p — 2 
ifr = 2. 

Our proof of Theorem ^ which is modeled after a similar result 
by Ward [23 Theorems 8.1 and 9.2] for elliptic divisibility sequences, 
proceeds by first lifting to a field of characteristic and then embedding 
the problem into C and using the transformation law for the Weierstrass 
cr-f unction. 

Theorem 2. Let E/Q p be an elliptic curve with good ordinary reduc- 
tion, let P G E(Q P ) be a point whose reduction modulo p has order r, 
and let rt be the period of the sequence (F n (P)) n > (cf. Theorem^. 
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Assume further that p > 3, that r > 3, and that p \ r . Fix a power p e 
of p satisfying p e = 1 (mod rt). Then for every m > 1, the limit 

G m (P) := lim F mp ek(P) converges in 7L V . 

k^roa 

Further, G m (P) = if and only if r\m. 

If in addition E is defined over Q and P G E(Q), then G m (P) is 
algebraic over Q. 

The proof of Theorem |2] uses the Mazur-Tate p-adic cr-function [T2"j . 
which is why the statement of the theorem is restricted to the case of 
curves with ordinary reduction. However, it is likely that the statement 
is true in general. We will use similar techniques to prove the following 
periodicity result modulo higher powers of p. (See Remark 0J) This 
may be compared with Shipsey [13 Theorem 3.5.4], who uses explicit 
formulas to prove an analogous result for elliptic divisibility sequences 
modulo p 2 . 

Theorem 3. With notation and assumptions as in Theorem for 
every fi > 1, the sequence 

(F kr (P) mod p")^ 

is periodic with period dividing p^~ x {p — 1). 

As an application of Theorem |21 we will partially answer a question 
raised in [221 concerning elliptic divisibility sequences. A (proper) el- 
liptic divisibility sequence is a sequence W = (W n ) n >o of integers whose 
initial terms satisfy W — 0, W\ — 1, W 2 W 3 ^ 0, W 2 \W^, and whose 
subsequent terms are determined by the nonlinear recursion 

W , W =W ,,W iW 2 -W^W iW 2 

" " m+n ' ' m—n " ' m+1 ' ' m— 1 " n " " ra+1 n—1 " ' m 

for all m > n > 1. Ward, who made an extensive study of these 
sequences j2H I2H] , shows that a proper elliptic divisibility sequence W 
is associated to a (possibly singular) elliptic curve Ey^ and point Pyy G 
Eyy(Q) and that the values of W n are closely related to the values of 
the division polynomials F n {Pw). More recently, elliptic divisibility 
sequences have been studied by Shipsey [TH], who gives an application 
to the elliptic curve discrete logarithm problem, and by several other 
authors [3 HI 13 IH1 13 HD1 1221- ( See also d 113 El for work on the 
related Somos sequences.) 

In (22], Nelson Stephens and the author proved that for any fixed 
modulus 2 e , the sequence 



(W 2 k mod 2 e ) fc > 
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is eventually periodic, and the question was raised as to whether this 
periodicity reflects a subtler p-adic convergence property. In this paper 
we use the results cited above to prove p-adic convergence for almost 
all primes. 

Theorem 4. Let W = (W n ) n >o be a proper elliptic divisibility se- 
quence, and assume that the associated elliptic curve Ey^ is nonsingular 
and does not have complex multiplication. Then for almost all primes p, 
in the sense of density, the following two statements are true. 

(a) There is an exponent N = N p > 1 so that for every m > 1, the 
limit 

lim W mp kr converges in Z p . (1) 

k— >oo 

(b) The limit given by ((TJ) is algebraic over Q. 

(If Ey^ has complex multiplication, then (a) and (b) are true for at least 
half of all primes, more precisely, they are true for all but finitely many 
of the primes that split in the CM field ofEyy.) 

Although we are only able to prove Theorem for almost all primes, 
we see no reason why it should not be true in general. 

Conjecture 5. Statements (a) and (b) of Theorem^are true for every 
proper elliptic divisibility sequence and for every prime p. 

In our proof of Theorem HJ it is natural to avoid a certain finite 
set of primes at which (W n ) behaves badly. However, the reason that 
we ultimately eliminate infinitely many primes is because we used the 
Mazur-Tate p-adic cx-function ^2] m our proof of Theorem |2l so that 
theorem only applies to elliptic curves with ordinary reduction. A 
theorem of Serre ^7j says that for a fixed (non-CM) elliptic curve E/Q, 
almost all primes are ordinary, but since Elkies jH] has shown that there 
are also infinitely many primes of supersingular reduction [S] , our proof 
cannot be directly extended to prove Theorem 0] for all but finitely 
many primes. 

1. Elliptic curves and division polynomials 

Let E/K be an elliptic curve defined over any field K, and fix a 
Weierstrass equation for E, 

E : y 2 + a\xy + a 3 y = x 3 + a 2 x 2 + a 4 x + a 6 . 

Then z = —x/y G K(E) is a uniformizer at O & E, and the invari- 
ant differential ui = dx/(2y + a^x + a 3 ) can be expanded as a formal 
(Laurant) series in a formal neighborhood of O as 

oj(z) = (1 + a\z + (a\ + a 2 )z 2 + ■ ■ ■) dz. 
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This series has coefficients in Z[aj., 02, 03, 0,4, Oe], and we have normal- 
ized matters so that (u/dz)(0) = 1. 

Definition 1. Let n > 1 be an integer and let [n](z) G ^[[2]] be 
the power series defining the multiplication-by-n map on the formal 
group of E. The n-division polynomial F n (normalized relative to the 
uniformizer z) is the unique rational function F n G K(E) satisfying 

(F n ) = [n]*(0)-n 2 (0) and fc^j (0) = 1. 

If n 7^ in K, then [n](z) = nz + 0(z 2 ), so the normalization condition 
becomes simply (z n ~ l F n )(0) = n. (For a more general normalization 
procedure, see Remark (TJ) 

We will use the following elementary "chain rule" for division poly- 
nomials. 

Lemma 6. For all integers m,n>l, 

F mn =(F n o[m})oF^ 2 . 

Proof. It is an easy exercise to verify that both sides have the same 
divisor and the same leading term at O. Or see ^21 Appendix I, 
Proposition 4] for a more general version. □ 

2. DlVISON POLYNOMIALS OVER C AND THE WEIERSTRASS 

CT-FUNCTION 

Let E/C be an elliptic curve and fix an isomorphism $ : C/L — ► 
E(C) with a lattice L C C. The classical n-division function on C/L 
is 

where cr(C, L) is the Weierstrass cr-function. We check that with the 
given normalization of F n , the relationship between F n and ip n behaves 
consistantly with respect to n. 

Lemma 7. Let E/C be an elliptic curve and $ : C/L — ► E(C) an 
isomorphism as above. Then there is a constant 7 G C* so that 

F n ($(0) = 7 1_n Vn(C, /or all (eC and alln>\. 

Proof. The analytic n-division function ip n ((,L) on C/L has the same 
divisor as F n o $, so they are constant multiples of one another, 

F n (HO) = CnMC, L) for all ( G C. (2) 
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The Weierstrass a-function satisfies <r((,L) = ( + 0(( 2 ) as ( — > 0, so 
^n(C^) = (n/C 2 " 1 ) (1 + 0(0). The m &P $ has the form (*o$)(C) = 
7^ + 0(( 2 ) in a neighborhood of 0, since $ is an isomorphism and £ 
and z are, respectively, uniformizers in neighborhoods of and O = 
$(0). Hence 

F n (<i>(0) = Fn{i( + o(c 2 )) = ^pzr(i + 0(0) = V- MC, l). 

Comparing this with (J2J), we see that with our chosen normalization 
of F n , there is a single constant 7 G C* such that 

F n o $ = 7 1 " n Vn for all n > 1. □ 



3. Periodicity of division polynomials over finite fields 

In this section we prove that the values of division polynomials over 
finite fields form a purely periodic sequence. Our proof is modeled after 
an analogous result by Ward (especially [2U Theorems 8.1 and 9.2]) for 
elliptic divisibility sequences. The proof uses a lift to characteristic zero 
and the Lefschetz principle. It would be interesting to find a purely 
finite field proof. 

Theorem 8. Let ¥ be a finite field, let E/W be an elliptic curve, and 
let P G E(¥) be a point of exact order r > 2. Then there are units a, b G 
F* ; depending on P, such that: 

(a) Ifr>3, then 

F kr+n (P) = a kn b k2 F n (P) for all k,n>0. (3) 

(b) Ifr = 2, then 

As an immediate corollary, we deduce the periodicity of the values 
of the division polynomials. 

Corollary 9. Let P G E(F) be as in the statement of Theorem^ Then 
the sequence 

( F n(P)) n > (5) 

is purely periodic. More precisely, if P has order r in E(¥) and if we 
let q = #F, then the sequence (JHJ) has period rt, where t\q — 1 if r > 3 
andt\2q-2 if r = 2. 



p-adic properties of division polynomials 



7 



Proof of Corollary^ We begin with the case that r > 3. Let a and b 
be as in Theorem |H1 and let t > 1 be the smallest integer such that 

a* = b* = l. 

In particular, t divides the least common multiple of the orders of a 
and b in F*, so t divides q — 1. Theorem |H] tells us that 

F rt+n (P) = a tn b t2 F n (P) = F n (P) for all n > 0, 

which shows that the sequence © is periodic and that rt is a period. 

Let £ > 1 be the smallest period, i.e., the smallest integer such that 
F l+n (P) = F n (P) for all n > 0. We note that F n (P) = if and only 
if r|n, since P has exact order r in E(¥). From Fg +r (P) = F r (P) = 0, 
we deduce that r\£, say £ = rs. Since rt is a period and £ = rs is the 
smallest period, we have s\t, which completes the proof if r > 3. (With 
a bit more work, one can show that s = t.) 

If r = 2, then it is easy to see from (0J that F n (P) is periodic and 
that the period must be even. Further we compute 

F°2k+l+4:(q-l)(P) = F 2 (k+2q-2)+l(P) 

= a k+2{q-l)^{k 2 -k)/2+{q-l){2k+2{q-l)-l) 

= a k b {k2 ' k)/2 since a q ~ l = b^ 1 = 1, 
= F 2k+1 (P) 

Thus the period divides 4(q — 1) and is even, so it has the form rt with 
t\2q-2. □ 

Proof of Theorem^ Before starting the proof, we note that if r\n, then 
both Fkr+ n (P) an d F n (P) vanish, so the desired formula (j3J) is vacu- 
ously true for any choice of a and j3. We assume henceforth that r \n. 

Let R be a complete local ring of characteristic zero with residue 
field F (e.g., the Witt ring over F), let K be the fraction field of R, 
let p be the maximal ideal of R, and let S/R be a lift of E/F given 
by a Weierstrass equation whose reduction modulo p is the Weierstrass 
equation of E/F used to normalize the division polynomials on E/F. 

The reduction map £(R) — > E(F) is surjective, so we can lift P G 
E(F) to a point in S(R). We would like to lift P to a torsion point of 
order r. If r is not divisible by the characteristic p of F, then there is 
a unique such lift, which can be computed by taking any lift Q 6 £{R) 
and computing the limit (see Proposition fTU|) 

P'= lim [p k }(Q). 

k^oo 
p k = l (mod r) 
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In general, if r = p e r' with p \ r', it suffices by the Chinese remainder 
theorem to lift [p e ](P) and [r'](P), so we are reduced to the case that r 
is a power of p, say r = p e with e > 1. Then it may not be possible to 
lift P to a torsion point in £(R), but it is possible to do so in a finite 
(ramified) extension, since we always have an exact sequence 

► £ f (R)[p°°] ► £(R)[p°°] ► £(¥)[p°°] ► 0, (6) 

where £f is the formal group of £. (We also note that E/F is necessarily 
ordinary, since E(W) contains the p e -torsion point P.) 

We may thus choose a finite extension K'/K with ring of inte- 
gers R'/R, residue field F'/F, and maximal ideal p'|p so that there 
is a torsion point P' G £(R') t0 is satisfying P' = P (mod p'). The 
point P' may not be uniquely determined by P, but this will not affect 
our argument. 

We next choose a subfield K' of K' that is small enough so that we 
can embed K' into C, but large enough so that the given Weierstrass 
equation for £ has coordinates in K' and so that P' G £(K' Q ). Having 
done this, we obtain an embedding 

£(K' ) c 8(C) < I C/L 

for some lattice LcC We let P' = $(£) under this identification. 
Lemma [7| tells us that there is a constant 7 G C* so that 

F„($(0) = l^^jA for ah C e C and all n > 1, 

where to ease notation, we will omit reference to the lattice L. This 
allows us to compute the ratio of division functions as 

W*(0) = a{krC ( + .. n ° ■ (M0f- {kr+n)2 ■ f b ($(0), (7) 

a(n() 

valid for all £ G C with n( ^ L. 

By assumption, the point £ G C/L has order r. If we identify £ with 
a particular element of C, then r£ G L. This allows us to apply the 
transformation formula for the cr-function (see |21| Theorem 1.5.4]) 

a(( + A) = ^(A)e" (A)(?+A/2) ( T(C) for all C G C and A G L. (8) 

Here ^(A) G {±1} and rj(X) is the quasiperiod associated to A. More 
precisely, ^ is a homomorphism \1/ : L/2L — > {±1} and 77 is a homo- 
morphism rj : L — > C. Applying (JEJ) with ( = and A = A;r£ and 
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using the fact that \I/ and r\ are homomorphisms yields 

\&(fcr£)e 



= ^(r£) fc ( e r >^) kn ^ r ^ /2 ) k2 . (9) 

This is valid if ^ L, or equivalently, if r \ n, since £ has exact order r 
inC/L. 

Now we substitute © into (J7J) with ( = £ to obtain 



= ^(rO k (e^(w(Or 2r ) kn (e^/ 2 ( 7 a(0)~ r2 ) fc2 ^($(0)- 

In other words, we have proven that there exist numbers a, (3 G C, 
depending only on £ and independent of k and n, so that 

P fcr +„($(0) = a kn (3 k2 F n (<$>(£)) for all fc, n > with r \ n. 

(We have absorbed ty{r£) k = (±l) fe into the /3 fc2 terms.) 

Recall that (eC/I corresponds to the point P' = $(£) G £(K' Q ), 
so we may equally well write this as 

F kr+n {P') = a kn f3 k2 F n {P') for all k,n>0. (10) 

(We drop the restriction that r \ n, since as noted earlier, the for- 
mula (jlUp is trivially true in this case.) 

We now make the assumption that r > 3, and at the end we will 
briefly indicate the changes needed to deal with the case r = 2. We 
substitute (k,n) = (1, 1) and (k,n) = (1,2) into (fTUjl to obtain 

P r+ i(P') = «/?Pi(P') = a(3 and F r+2 (P') = a 2 (3F 2 (P'). 

(Note that Pi = 1.) Our assumption that r > 3 implies that F 2 (P') ^ 
0, so we can solve for a and /3, 



F 2 (P')F r+1 (P 



- e K(P') c ff', 



(11) 



p = e c K>. 

^r+2\P ) 

Thus we may view (jlUj) as a formula in the complete local field K', 
since all of the quanitities appearing in it are in K' . 

We claim that a and (3 are actually p'-units in K' . This follows from 
the fact that for points Q G S(R') \ S^(R') and integers n > 1, we 
have 

P n (Q) = (mod p') if and only if nQ = O (mod p'). 
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Thus (fTT|) shows that a and (3 are p'-units provided that 

(r + 2)P'^£> (modp'), 

(r + l)P'^0 (modp'), (12) 

2P'^0 (modp'). 

But P' modulo p' has exact period r > 3, so the three conditions (fT2*|) 
are true. 

To recapitulate, we have shown that there are p'-units a, (3 G K' 
such that 

F kr+n (P') = a kn l3 k2 F n {P') for all k, n > 0. (13) 

We reduce this formula modulo p' and use the fact that P' = P (mod p) 
(remember that we chose P' to be a lift of the point P G E(F)) to obtain 

F kr+n {P) = a kn b k2 F n {P) for all k,n>0, 

where a and b are elements of the residue field F' of K' . To see 
that a,b G F, we substitute (k, n) = (1, 1) and (k, n) = (1, 2) and 
solve for a, b (cf. (jlljl ) to obtain 

- F -< P » eF , t= Fa( C )F ?' (P) %F. (14) 



F2(P)F r+l (P) F r+2 (P) 
(The Fi{P) values are nonzero, since Fi(P) = Fi(P') (mod p').) This 
completes the proof of Theorem |H1 for r > 3. 

Suppose now that r = 2. Then it is not helpful to substitute 
(k, n) = (1,2) into (JTUJ), since both sides are zero. So instead we 
substitute (k, n) = (1,1) and (k, n) = (1,3) to obatin 

F r+1 (P') = af3F 1 (P') = a(3 and F r+3 (P') = a 3 (3F 3 (P'), 

where we know that F 3 (P') ^ since P' has order r = 2. We can no 
longer solve for a and f3, but we can solve for for the quantities (cf. (fTT]0 

I 2 = F3(P ' )Fr ^ P ' )3 and «/3 = F r+1 (P'). (15) 

Thus f3 2 and a/3 are in K', and by the same argument given earlier, 
they are actually p' units in K'. We set n = 1 and r = 2 in (fT3*|) to 
obtain 

F 2fc+1 (P') = a k l3 k2 = (a(3) k (P 2 Y k2 ~ k V 2 . 

Reducing this formula modulo p' and using the fact that P' mod p' is 
equal to P, we see that there are units a, b G F' (i.e., a = a(3 (mod p') 
and b = (3 2 (mod p')) so that 

F 2k+1 (P) = a fe 6 (fc2 - fc)/2 for all k > 0. 
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Finally, putting k = 1 shows that a = F%(P) G F and then putting 
k = 2 shows that b = a _1 F 5 (P) G F, which completes the proof of 
Theorem |H1 for r = 3. □ 



4. The Teichmuller character 

The classical Teichimiiller character is the unique homomorphism 

X ■ K — ► A* P -i satsifying x(<0 - a ( mod 

The Teichmuller character may be constructed as x( a ) = hma p . It 
is well known how to generalize this construction to group schemes G 
over Z p or other complete local rings. 

Proposition 10. Let K/Q p be a finite extension, let R be the ring of 
integers of K , let p be the maximal ideal of R, and let F be the residue 
field of R. Let G/R be a group scheme, and for any point a G G(R), 
let r(a) denote the order of a mod p in the special fiber G(F). We 
denote by 

G'(R) = {ae G(R) ■p\t(o)} 
the pullback to G(R) of the prime-to-p part of G(¥). 

(a) There is a unique homomorphism 

X : G'(R) — ► G(R) toIS satsifying = a (mod p). (16) 

We call x the Teichmuller "character" for G/R. 

(b) Writing the gruop law in G(R) multiplicatively, the Teichmuller 
character can be computed as the limit 

X(a) = lim a pk . (17) 

k— >oo 
p k =l (mod r(a)) 

(c) The order of xi a ) ^ n G(R)tor S is exactly r(a). 

(d) The reduction map G'(R)t OTS — * G'(¥) is an isomorphism. 

Proof. For lack of a suitable reference, we sketch the short proof of 
this well-known result. We begin by proving that the limit (|17|) in (b) 
exists. 

Let G\(R) be the kernel of the reduction map G(R) — > G(F). Then 
Gi(R) is a pro-p group. Let q = p e be the smallest power of p satisfying 
9 = 1 (mod t(o)). Then a q = a (mod p), so for i > j we have 

a q * ■ a~ q3 = (a qt J ~ i y — > \ G as i > j — > oo. 

This is true since a q% 3 = a (mod p), so a ql 3 ~ 1 G Gi(R). Thus the 
sequence ()17|) is Cauchy, so it converges. 
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For a G G'(R), we now define x( a ) to be the limit (j!7j) . Then 
x(a) = lim a ql = a (mod p) and = 

i— >oo 

In particular, x( a ) 9 1 = 1g 5 so x( a ) £ G(R) tors . This shows that the 
function x defined by the limit (fTTjl has the desired properties (JTHJ) , and 
it is obvious that it is a homomorphism, which proves the existence part 
of (a). The uniqueness is immediate from the fact that Gi(R) has no 
prime-to-p torsion and that xi a ) has order dividing q — 1. 

Let T be the order of x( a )? so from above, T\q — 1. In particular, T 
is prime to p. Further, we have 

X (a) T{a) = a T{a) = 1 (mod p), 

so x{ a Y^ is a T th root of unity whose reduction modulo p is 1. 
The formal multiplicative group G mj i(i?) has no prime-to-p torsion, so 
x( a ) T ^ — 1- Thus T\r(a). Conversely, 1 = x( a ) T = a T = 1 (mod p), 
so r(a)\T. Hence T = r(a), which completes the proof of (c). 

The proof of (d) is also immediate. The map G'(R) tOTS — > G(F) is 
injective, since the formal group G\(R) has no prime-to-p torsion. On 
the other hand, let a G G(¥) have order r with p \ r. The group G is 
smooth over R, so we can choose an a G G(R) with a = a (mod p). 
Then r(a) = r by definition, and x( a ) ^ G(R) tmB satisfies 

x(a) = a = a (mod p). 

This shows that the map G'(R)tors G'(¥) is surjective, which com- 
pletes the proof of (d). □ 

5. The Mazur-Tate p-adic sigma function 

In this section we recall a construction of Mazur and Tate, and in 
the next section we apply their construction to prove a p-adic limit for 
division polynomials on elliptic curves with ordinary reduction. We set 
the following notation (following j!2j): 

K a finite extension of Q p . 
R the ring of integers of K. 
p the maximal ideal of R. 
F the residue field R/p of K. 

R the integral closure of R in an algebraic closure K of K. 

E/K an elliptic curve over K. We also fix a minimal Weierstrass 
equation for E/K, from which we obtain an invariant dif- 
ferential u = dxj {2y+a\x+a^) and a uniformizer z = —x/y 
at O satisfying (uo/dz)(0) = 1. 

S/R the Neron model of E. 
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£* the formal group of £. 

F n the n-division polynomial on E, that is, the rational func- 
tion F n G K(E) satisfying Definition^ for the given Weier- 
strass equation. 

Remark 1. Mazur and Tate ^2] define division polynomials F n G K(E) 
to be the unique functions satisfying 

(Fj = [ Bn0 )- B '( ) md (£||))( )^(^( ))'-" 2 . 

This agrees with our definition (|T|). since we have chosen 2 and u; com- 
patibly to satisfy (u/dz)(0) = 1. 

Theorem 11 (Mazur- Tate). VFzi/i t/ie above notation and normaliza- 
tions, assume that p > 3 anc? t/iat £ /ias pocxi ordinary reduction. Then 
there is a unique power series a G z + z 2 .R[[2:]] satisfying 

a(nQ) = a(Q) n2 F n (Q) for all Q G £ f (R). (18) 

Proof. See O Section 2] for the construction of a and O Theo- 
rem 3.1] for a description of its properties. The construction of a actu- 
ally works as long as £ has ordinary reduction, i.e., if £f is isomorphic 
over F to the formal multiplicative group & m . If one chooses a different 
Weierstrass equation for E, then F n changes by a constant factor of the 
form c n _1 with c G R*, and hence cr changes by a factor c. □ 

Remark 2. TheoremlTTIremains true for p = 2 provided that everything 
is squared. That is, there is a unique power series a 2 & z 2 + z 3 R[[z]] 
satisfying a 2 {nQ) = a{Q) 2n F 2 {Q). But it is not possible to unam- 
biguously take a square root and have (fTHj) hold for all n > 1 and 
all Q G £ f (R). 

6. A p-ADIC LIMIT OF DIVISION POLYNOMIALS 

In this section we compute the p-adic limit of the values of certain 
subseqeunces of the division polynomials evaluated at a point. We 
continue with the notation from Section 

Theorem 12. Assume that p > 3 and that £ has good ordinary reduc- 
tion, and let P G £(R) \ £ f (R). 

(a) There exists a power q = p N so that for every m > I, the limit 

G m ,q(P) '■= h m F mq k(P) converges in R. (19) 

k^oo 

(b) G m>q (P) is algebraic overQ(E). 
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(c) In order to specify an allowable value for q, let r > 2 be the order 
of P mod p. Then Corollary^ tells us that the sequence 

{F n {P) mod p) n>0 

is periodic with period rt for some integer t > 1 with p \ t. Let r' 
be the p-free part of r, that is, r' = rp~ ordp ( r \ and let e > 1 be an 
exponent so that 

q = (Np) e satisfies q = 1 (mod r't). 

Then the limit (JTHj) in (a) exists for this value of q. 

(d) Continuing with the notation from (c), we have 

G m ,q{P) r ' 2 e Q(n(K),E[r']), 

where fJt(K) denotes the roots of unity in K. Further, 

G mtq (P) = if and only if m = (mod r'). 

Remark 3. We note that it is quite easy to estimate the valuation 
of F n (P), either directly as in 2 J or using the transformation formula for 
local height functions. In particular, with notation as in Theorem 
it is an elementary exercise to prove that 

v(F rn (P)) = v(n) + 0(1) for all n > 1, 

and hence F rp k(P) —> as k — ► oo. Thus the interest and the depth of 
Theorem 1121 lies in the convergence of F mg k(P) in those cases that the 
limit is not zero. 

Before starting the proof of Theorem IT2"l we give an elementary result 
that will allow us to take roots of convergent sequences. 

Lemma 13. Let (Ak)k>o be a sequence in R* with the property that 
(Ak mod p)fc>o is constant. Let n > 1 be an integer with p\n. Then 

lim A\ exists in R <^=^> lim A^ exists in R. 

Proof. One direction is trivial. So we assume that lim^oo A% exists 
and we must prove that we may take the n th root. Fix a G R* with 
a = Ak (mod p) for all k > 0. Then for any j, k > we have 

re-l 

A* ■ Air 1 ' 1 = na"- 1 £ (mod p), 
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from which we deduce that 



lim | Aj — Ah. I = lim 



\ An _ An\ 

I A 3 A k | 



n-1 



j,k— >oo j,k—*oo 

1=0 

= lim U?-AJJ| 

= since A% converges as k — > oo. 

This shows that the sequence (v4fc)fc> is Cauchy, hence converges, in R, 
which completes the proof of the lemma. □ 

We are now ready to prove our main result. 

Proof of Theorem\l 6 A We use Lemma |H1 twice to obtain 

(F r o [n]) • F? = F nr = F rn = (F n o [r]) • F?\ 

and hence 

2 _ (F n o[r]).Ff 
(F r o[n}) • 

We evaluate this identity at the point P and use the fact that rP G 
S f (R) to rewrite F n (rP) using the Mazur-Tate sigma function. Thus 

F n (rP)F r (P) n2 



F n (py 



F r (nP) 
a(nrP)/a(rP) nA ) F r (P) n * 



F r (nP) 
a{rnP) ( F r (P) 



from Theorem ITU 



F r {nP) \a(rP)J ' ^ 

We consider first the case that p \ r, so we may let T = x(P) ^ E[r] 
be the Teichmiiller image of P (Proposition^)), and then Q = P — T 
satisfies Q G 8 s (R). (See Section S) Note that T ^ O, since we have 
assumed that P ^ £A Using rP = r(T + Q) = rQ, we can rewrite (J2(Jj) 
as 

Ffpr 2 a(rng) p;(r + Q) y a 

^ j ~ F r (nT + nQ) ' \ a(rQ) J ' ^ 

Let 

r T : 5 — > £ 

be the translation-by-T map. The division function F r has simple zeros 
at all nonzero r-torsion points, and our assumption that p \ r implies 
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that the same is true of the restriction of F r to the special fiber of 8. 
Hence 

F r or T = z-g T (22) 

for a rational function G K(E) whose restriction to the special fiber 
of £ is regular and nonvanishing at O, i.e., gr{0) G R*. 
Then using the fact that Q G &{R) and p \ r, we see that 



F r {T + Q) _ z{Q)-g T {Q) 

\ 

9t(Q) 



a{rQ) a(rQ) 

z(Q) z(rQ) 



z(rQ) a(rQ) 
= ^g T (0) (mod p). 

Hence if we let n = mq k with q a power of Np and with some fixed m 
and if we let k — » oo, then we can evaluate the limit of the second 
factor in (|2*Tj) as 

■g T (0) 



fc->oo V a(rQ) J 



(mq k ) 2 

= X 



where x '■ R* ~~ > / Lt (-^) is the Teichmiiller character on K (cf. Proposi- 
tion I n particular, the value is a root of unity in K. 

In order to evaluate the limit of the first factor in (|21|) . we take a 
sequence of n's of the form n = mq k with k = 1, 2, 3, ... , where q is 
a certain fixed power of p. More precisely, we already noted that we 
want q to be a power of Np, and we now further specify that 

q = (Np) e satisfies q = 1 (mod rt). (23) 

In particular, g = 1 (mod r), so n = m (mod r) for all k, and hence 
nT = mT is independent of k. To ease notation, we let Qk = nQ = 
mq k Q, so the first factor in (J2T|) is a{rQ k ) / F r {mT + Q k ). Our task is 
to evaluate the limit of this fraction as Q k — > O. There are two cases 
to consider. 

First, if r|m, then mT = O, so we must evaluate the limit of 
c{rQk) / F r {Qk). The function a o [r] has a simple zero at O, while F r 
has a pole of order r 2 — 1 at O, so (cr o [r])/F r vanishes (to order r 2 ) 
at O. Hence in this case the limit is 0. 
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The more interesting case is when r \m, so mT is a nonzero torsion 
point. Then 

cr(rQ k ) cr(rQ k ) 



F r (mT + Q k ) z(Q k ) ■ g mT {Qk) 

o{rQk) z(rQ k ) 1 



from ((22), 



z(rQ k ) z(Q k ) g m T(Qk 



Qk-o g mT (0)' 

To recapitulate, taking q as specified in (J23|) . we have proven that 

(p y 2 _\Q if r\m, . . 

ft Vl J l(«))'X(#)/r) m V0 ifrfm. ( j 

This almost completes the proof when p \ r, the only difficulty being 
that if r \ m, then we have only computed a power of the desired limit. 
In order to take the r 2 -root, we consider the sequence 

A k = F mqk {P), k = 0,1,2, 

We observe first that the sequence A k mod p is actually constant, since 
the sequence (F n (P) mod p) n >o is periodic ( Corollary EJ) with period rt 
and q satisfies q = 1 (mod rt) from Thus 

mg fc = m (mod rt) for every A; > 0, 

and hence 

A k = F mqk (P) = F m {P) = A (mod p) for all k > 0. 

2 

On the other hand, we have already proven that lim^oo A T k exists 
in R. So we can apply Lemma IT31 (with n = r 2 ) to the sequence A k 
and deduce that limfc^oo A k exists in R. This completes the proof of 
the theorem in the case that p\r. 

Next we consider the case that r = p 3 is a power of p, so in partic- 
ular j > 1. For each integer k > 0, let K k = K(E[p k+1 }), let R k be 
the ring of integers of K k , let pfc|p be the maximal ideal of R k , and 
let Ffc = R k /p k be the residue field of K k . 

We note that for any integers m\n, the quotient F n /F m is regular 
away from O, since its divisor is 

(F n /F m ) = [m]*([n/mnO) - (0)) - (n 2 -m 2 )(0) > -(n 2 -m 2 )(0). 
In particular, 

Fpk+i = Ppfc • /pfe (25) 

for a function f p h G K(E) that is regular away from (9 and that vanishes 
at the points in E[p k+1 ] \ £?[p fe ]. 
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We claim that F p k(P) — > as k — > oo. Fix a point T G P^- 7 '] 
satisfying T = P (mod pj) (cf. the exact sequence (JBJ)) and let k > j. 
Then all of the points in the set 

{T + T' :T' eE f \p k+1 ]\E f \p k }} 

have that property that 

T + T' = T = P (modp fc ) and T + T' e E[p k+1 ] \ E[p k }. 

It follows that fk(T + T') = 0, and hence that 

f k (P) = f k (T + T f )=0 (modp fc ). 

However, fk(P) G so fk(P) = (mod p). Now we use pHj) repeat- 
edly to deduce that 

fc-i 

P pfe (P) = F pJ (P) JJ / p4 (P) = (mod p k - j ) for all k > j. 

i=j 

Hence 

limP pfc (P) = 0. (26) 

fc^oo 

More generally, still assuming that r = p> , let m > 1 be a fixed 
integer and write m = m!p l with p \ m'. Then 

lim F mpk (P) = lim F m , pk (P) 

fe^oo k-^oo 

= lim F p k(m'P)F m i(P) pk from Lemma |HJ 

k— >oo 

= from 

since m'P also has order and P m / (P) G P. This completes the proof 
in the case that r = p 7 is a power of p. 

Finally, we consider the case that p\r, but r is not a power of p, say 
r = p-V with j > 1 and r' > 2. Notice that the point P' = pPP has 
exact order r' modulo p, where r' > 2 and p \ r'. From above, there is 
a power q of p so that 

lim F mq k(P') exists, 

and further the limit is if and only if r'\m. We next use Lemma El to 
write 

F mgk (P) = F mp - jqk (pip)F pj (P)^-^ 2 = F mp - Jqk (P')F p3 (P)^^ 2 . 

Since we are going to let k — > oo, we can pull off some powers of q 
to compensate for the p~K To simplify notation, fix an exponent i so 
that pi\q and let w! = mq e . Then we find that 

lim F mqk (P) = lim F m , qk (P')F p3 (PY m '^ 2 . (27) 

k— >oo fe^oo 
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The point P' has exact order r' modulo p, where r' > 2 and p \ r', so 
from above, we know that the first term F m , q k(P') in (J27j) has a limit 
in Z p as k — > oo, and further that the limit is if and only if r'\m. 
(Note that r'\m if and only if r'\m' , since p \ r'.) Similarly, the second 
term in ()27|) has a limit in R, since F p] (P) G R* (where we again use 
the assumption that r' > 2). More precisely, the limit is a root of unity, 
a power of the value of the Teichmuller character x{F p j(P)). Hence the 
limit in (|2"7j) exists, which completes the proof of Theorem H2T a) that 
in all cases, 

G m ,q(P) = lim F mq k(P) exists in R. 

However, a closer examination of the proof given above shows that 
we have actually completed the proof of all four parts of Theorem 
We showed that the limit exists for the value of q specified in (c), and 
we showed that G m ^ q (P) = precisely as specified in (d). Further 

the value of the limit G myq (P) r ' is given explicitly in terms of certain 
rational functions in K(E) evaluated at certain points in J5[r'], together 
with certain roots of unity, so G mj? (P) is algebraic over Q(E), and in 
fact satisfies the property described in (d). □ 

7. Periodicity of division polynomials modulo p M 

We continue with the notation used in Sections El and El so Kj Q p 
is a finite extension and E/K an elliptic curve. For simplicity, assume 
that p > 3 and that E has good reduction. 

Let P G E(K) be a point whose reduction modulo p has order r > 2. 
We proved in Corollary El that the sequence (F n (P) mod p) is periodic 
with period rt, where gcd(p, t) = 1. More precisely, in Theorem |S1 we 
gave an explicit formula for i 7 \, r+n (P) mod p as a function of k and n. 
Of course, when n — 0, then F kr (P) = (mod p). 

In the context of elliptic divisibility sequences, which we will study 
in Sectional Shipsey ^01 Theorem 3.5.4] gives a formula (when K = 
Q p ) for the value of Fk r {P) modulo p 2 , and from this she immediately 
deduces the periodicity of the sequence (Fjt r (P) modp 2 )fc>i- We will 
use the Mazur-Tate a-function to prove a result that is both much 
stronger, and yet not as general, as that of Shipsey. More precisely, we 
will prove the periodicity of (Pfc r (P) mod p M )fc>i for every fixed prime 
power p M , but our proof will only be valid when E has good ordinary 
reduction. 

Theorem 14. With notation as in Section^ assume that p > 3 and 
that £ has good ordinary reduction, and let P G S{R) \8^{R). Further 
let r > 2 be the order of P mod p. Then for any exponent /j, > 1, the 
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sequence 

(F kr (P) mod p M ),t>i is periodic. (28) 

More precisely, let e = ord p (p) be the ramification index of K p /Q p and 
let X be the smallest positive integer satisfying 

min {(A-i)e + p*| > u. (29) 

Then the sequence ()28|) has period dividing (Np — l)p x . 

Proof. The point rP is in the formal group £f(R), so the Mazur-Tate 
a-function can be evaluated at rP. This allows us to compute 

F kr (P) = F k (rP)F r (P) k2 from Lemma© 

= ,Sl F r (Pf from Theorem HH 

a(rP) k 

We claim that the second factor is a p-adic unit. To see this, we 
observe that the composition a o [r] is well-defined on the set 

U r = £[r)+£ f (R), 

which is a p-adic analytic neighborhood of the r-torsion sections of the 
scheme £ . Further, since a itself has divisor (O) in £*(R), we see that 
the divisor of a o [r] on the set U r is given by 

(ao[r])\ Ur = [rnO). 

On the other hand, the function F r has divisor 

(F r ) = [r]*(0)-r\0). 

Thus 

F r 

o o \r\ 



= ~r\0). (31) 

We have assumed that r > 2, which is equivalent to the assumption 
that P (jz £f , so P and O do not intersect on the special fiber of £. 
(More formally, P and O determine sections sp, so '■ Spec(i?) — > £, and 
our assumption ensure that the divisors sp(Spec(i?)) and so(Spec(i?)) 
do not intersect on the special fiber £ x R (R/p).) It follows from (p?T]) 
that (F r /a o [r])(P) is a p-adic unit. 

Using this fact in ([3*0)1. we have proven that there is a unit a G R* 
so that 

F kr (P) = a(krP) ■ a k2 for all k > 1. (32) 
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The point rP is in the formal group, so we need to determine the 
periodicity properties of cro [k] on the formal group £f(R). We use the 
following well-known elementary result, whose proof we briefly sketch. 

Lemma 15. Let K/Q p be a finite extension with ring of integers R, 
maximal ideal p and ramification index e = ord p (p). Let QjR be a 
one-parameter formal group. 

(a) For every A > 1 there are power series A\ t i(z) G for < 
i < A so that 

A 

[p%(z) = J2p x ^ a ^ p 1- 

(b) Fix fi > 1, and let A be the smallest positive integer with the 
property that 

min {(A — i)e + p l \ > a. (33) 

Then 

[p x ]g(z) = (mod p M ) for all z ep. 
Equivalently, we have 

Proof of LemmaXTh\ (a) The multiplication-by-p map on any formal 
group has the form 

\p\(z) = pF(z) + G(z p ) for some F,Gg R[[z]\. 

This is most easily proven using the invariant differential, see for ex- 
ample [201 Corollary IV. 4. 4]. This proves (a) for A = 1. The general 
case is then easily proven by induction, using the formula [p A+1 ](^) = 

ji(y v u0- 

In order to prove (b), we observe that (a) implies that 

ord p ([p A ](z)) > min^ {(A — i)e + p 1 } for all z G p. 

Then our choice of A to satisfy (jHSl) yields 

ord p (\p x ](z)) > fi for all z G p. 

This is just another way of saying the [p A ](^) = (mod p M ), which 
completes the proof of Lemma ^| □ 

We resume the proof of the theorem and we assume that A is chosen 
as specified in so Lemma ITBI tells us that 

[j9 A ](Q)=0 (modp") for all Q G £^{R). 
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In particular, this is true for Q = rP, where P was our original point 
whose order modulo p is r. Hence 

[p x r](P) = [p x ](rP) = (mod p M ), 

so for any k,j > 1 we have 

\{k + mp x )r}{P) = [kr]{P) + [m]{\p x r}{P)) = \kr}{P) (mod gp^). 

(34) 

Substituting this into ([32)1 . we find that for all k, m > 1, 

F(k+m P *)r{P) — cr({k + mp x )rP) ■ a {k+mpX)2 from (JS2D, 
= a(krP) ■ a {k+mpX)2 (mod p M ) from (}3"4*j) . 
= F fcr (P) • a ( fc +-P A ) 2 - fc2 f rom (j22D, 

= F kr (P). (a 2 ^)^ ■ 

In particular, if mp A is a multiple of 

#{R/p p ) = Np» - Np^ 1 , 

then / g m P A = 1 (mod p M ) for all p-adic units (3. However, we observe 
that taking i = in our definition of A, we have Ae + 1 > which 
implies that Np M_1 automatically divides p A . Thus it suffices to take m 
divisible by Np — 1. 

We have proven that if £ > 1 is any integer satisfying 

/(Np-l) |/, 

where A is chosen to satisfy (|29|). then 

F (k+e)r (P) = F kr (P) (modp^). 

Hence the sequence (F kr (P) mod p M ) is periodic and its period is as 
specified in the statement of Theorem D 

Remark 4. For = Q p , we always have 

min ((A-i) + = A+ 1. 

0<i<A L 

Thus the condition ()29|) becomes simply A = /i — 1, so Theorem IT41 tells 
us that 

(F kr (P) mod p^)k>i has period dividing p^" l (j> — 1). 

Taking /i = 2, we recover Shipsey's result, albeit in the context of 
division polynomials rather than elliptic divisibility sequences, and only 
in the case of good ordinary reduction. 
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Continuing with the case K = Q p , we consider anew the formula JH21), 
which now says that there is an a G Z* so that 

F kr (P) = a(krP) ■ for all k > I. (35) 

We recall that rP e £f(R), so z(rP) = (mod p). Thus 

z(krP) = [k](z(rP)) = k ■ z(rP) (mod z(rP) 2 ), 

so in particular, z(krP) = k ■ z(rP) (mod p 2 ). Hence with our normal- 
ization of the Mazur-Tate cr-function, it follows that 

a(krP) = k ■ z(rP) (mod p 2 ). (36) 

Applying (|35|) and (|3Tj) twice, once with arbitrary k and once with k = 
1, we deduce the simple formula 

F kr {P) = k-a k2 - l -F r {P) (modp 2 ). (37) 

This may be compared with Shipsey's formula ^01 Theorem 3.5.4] for 
an elliptic divisibility sequence (W n ) modulo p 2 , for which she proves 
(under suitable hypotheses) 

W kr EE k ■ ft* 2 - 1 ■ W r (mod p 2 ) . 

(We have simplified Shipsey's formula by observing that (— l) fc+1 is 
equal to (— l) fc2_1 , so our (3 is the negative of Shipsey's b.) 

It is interesting to note that an analogous formula for F^ r (P) mod p 3 
would necessarily be more complicated, since it becomes necessary to 
consider more than the first term of the power series for [k](z) and cr(z). 
On the other hand, using the fact that 

F p n-i r (P) ee (modp M ), 
it is possible to give a simple formula for the sequence 

(iV- lr (P) mod^ +1 )^ 1 
that generalizes (|3*7jl. We leave the details to the interested reader. 

8. Elliptic divisibility sequences 

We are going to use Theorem [T21 to partially prove a conjecture 
concerning the p-adic behavior of classical elliptic divisibility sequences. 
Our inspiration for this result, and indeed the original motivation for 
much of the work in this paper, is aptly summarized by the following 
quote from Morgan Ward's monograph j2U page 33]. 
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If the least positive residues modulo m of the successive 
values U ,Ui,U 2 , ■ ■ ■ of any Lucas function (i.e., U n = 
(a n — (3 n )/(a — P)) are calculated, the pattern of residues 
exhibits interesting symmetries. These symmetries ex- 
tend to elliptic sequences, and find their ultimate ex- 
planation in the periodicity of the second kind of the 
Weierstrass sigma function. 

We recall the general definition of a divisibility sequence as being a 
sequence of integers (D n ) n > satisfying 



A standard example of a divisibility sequence is one of the form a n — 1, 
and more generally, divisibility sequences may appear as linear recur- 
rence sequences such as the Fibonacci sequence. A complete classifi- 
cation of divisibility sequences associated to linear recurrences is given 
in |T]. 

It is less clear that there are interesting divisibility sequences satisfy- 
ing nonlinear recurrences. The most famous examples of such sequences 
are associated to the recursion formula for division polynomials on el- 
liptic curves. 

Definition 2. An elliptic divisibility sequence (abbreviated EDS) is a 
divisibility sequence W = (W n ) n > satisfying the formula 

W , W =W xl lf ,W 2 -W^W ,W 2 

m+n m—n m+1 m—1 n n+1 n— 1 m 

for all m > n > 1. (38) 

The arithmetic properties of elliptic divisibility sequences were first 
studied in detail by Morgan Ward [2U 1213 in the 1940's, and recently 
there has been a resurgence of interest in their study IH El El 
□H H3 123 122- (See also [HI EH El for work on the related Somos 
sequences.) Ward calls an EDS proper if 

W = 0, W x = 1, and W 2 W 3 ^ 0, 

and he proves that a proper EDS is associated to a pair (E w , P w ) 
consisting of a (possibly singular) elliptic curve and a rational point 
Pyv G E W (Q). Further, the sequence W satisfies a linear recurrence if 
and only if the curve E w is singular and is bounded if and only if P w 
is a torsion point. 

Remark 5. The nonsingularity of the curve Eyv associated to a proper 
elliptic divisibility sequence W is equivalent to the nonvanishing of the 
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discriminant 

Disc(W) = W 4 W 2 15 - WlW\ 2 + 3W^W 2 10 - 20W 4 W^W 2 7 

+ 3WiW$ + 16W 3 6 W| + 8W|W 3 3 W 2 2 + Wl (39) 

This is essentially the discriminant of the curve Eyy (cf. Ward j2H 
equation (19.3)]). See [24J or [221 Appendix] for additional formulas 
describing Ew and Py\>. 

Remark 6. Except in some degenerate cases, the definition of an EDS 
forces Wo = (put m = n in (jSHJ)) and W\ = ±1 (put n = 1). As noted 
above, a proper EDS with Disc(W) = satisfies a linear recurrence. 
See [nUHl] for details and a complete description of nonproper EDS. 

Definition 3. We call W a general elliptic divisibility sequences if it 
satisfies: 

(1) W is proper; 

(2) Ew is a nonsingular elliptic curve, or equivalently, Disc(W) ^ 0; 

(3) Pyy is a point of infinite order in E W (Q), or equivalently, W is 
unbounded. 

From our earlier remarks, these are the most interesting EDS. (Note 
that this definition differs somewhat from Ward's terminology.) 

Example 1. The simplest general elliptic divisibility sequence is the 
sequence 

1, 1, -1, 1, 2, -1, -3, -5, 7, -4, -23, 29, 59, 129, -314, 

- 65, 1529, -3689, -8209, -16264, . . . (40) 

It is associated to the generator P = (0, 0) of the Mordell-Weil group 
on the elliptic curve y 2 + y = x 3 — x of conductor 37. 

An elliptic divisibility sequence (W n ) is required to satisfy the recur- 
sion (|3~8*j) for all m > n > 1. It is easy to check that it suffices that (W n ) 
satisfy the two relations 

W 2n+1 = W n+2 W* - W^W^ (41) 
W 2n W 2 = W n {W n+2 W 2 n _ x - W n _ 2 W 2 n+1 ) . (42) 

In particular, a proper EDS is determined by the values of W%, W3, W4. 
Further, a triple W2,W 3 ,W 4: with W 2 W 3 ^ gives an EDS if and 
only if JV2IW4. (See j21]-) Additional material on elliptic divisibility 
sequences may be found in El El El 13 HDl US 1221 1231 123 - 
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9. Elliptic divisibility sequences and elliptic functions 

We recall Ward's fundamental result relating elliptic divisibility se- 
quences to values of elliptic functions. 

Theorem 16. Let (W n ) be a general elliptic divisibility sequence. Then 
there is a lattice LcC and a complex number (eC such that 

cr(£,L) n 

where ip n (£, L) and g(£,L) are, respectively, the (analytic) n-division 
polynomial and the Weierstrass a -function associated to the lattice L. 

Further, the modular invariants g2{L) and g 3 (L) associated to the 
lattice L and the Weierstrass values jp(£, L) and p'(£, L) associated 
to the point £ on the elliptic curve C/L are in the field Q. (More 
precisely, g 2 (L) , g 3 (L) , L), p'(£, L) are given as rational expressions 
in®(W 2 ,W 3 ,W 4 ).) ' 

Proof. See Ward [2U Theorems 12.1 and 19.1]. The rational expres- 
sions for g 2 and g 3 in ®(W 2 , W 3 , W±) are given by [2U equations 13.6 
and 13.7], and the rational expressions for p(£, L) and p'(£, L) are given 
by j2H equations 13.5 and 13.1]. See also [221 Appendix] for simplified 
formulas. □ 

We also mention that Ward proves a partial converse to Theorem [TBI 

Theorem 17. Let L be a lattice with g 2 (L),g 3 (L) G Q and let £ G C 

satisfy L), L) G Q. Then there is a constant c G Q* so that 
the sequence (c n -1 ^ n (£, L)) is an elliptic divisibility sequence. 

Proof. This is proven in |2"H Theorem 21.4]. See also 012111 • □ 

We reformulate Ward's result so that it is entirely in terms of rational 
numbers. 

Proposition 18. Let W = (W n ) be a nonsingular elliptic divisibility 
sequence, and let Eyy/Q and Pw G E(Q) be the associated elliptic curve 
and rational point. Fix a minimal Weierstrass equation for Eyy, and 
let F n be the normalized n-division polynomial on Ew (Definition^ . 
Then there is a constant 7 G Q* so that 

W n = 7 " 2 - 1 F n (P w ) for alln>\. 

Further, the denominator of 7 is divisible only by primes of bad reduc- 
tion of Pyy, i.e., primes p of bad reduction for E w at which P w modp 
is the singular point on Ey^ mod p. 
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Proof. We use Theorem EH to choose a lattice L and complex num- 
ber £ £ C so that the given EDS has the form W n = L) for all 
n > 1. Let $ : C/L — > P(C) be an isomorphism. Then Lemma [7| tells 
us that there is a constant 7 £ C* so that 

F n ($(C)) = 7 1_n Vn(C, £) for all C G C and all n > 1. 
Substituting £ = £, so Pyy = ^(0> we obtain 

F n (Pw) = 7 1_n Vn(e, £) = l l ~ n2 W n for all n > 1. 

Putting n = 2 and n = 3, we find that 7 s and 7 s are in Q, and hence 
that 7 £ Q, which completes the proof that W n = 7™ _1 P n (P>v) with 

Since W n £ Z, we see that 

ord p (P n (P w )) = ord p W n - (n 2 - 1) ord p (7) 

> -(n 2 - 1) ord p (7) for all n > 1. (43) 

Let p be a prime such that P>v mod p is nonsingular. Then Pyy mod p 
cannot have order both 2 and 3, so at least one of P 2 (Pw) and F 3 (P W ) 
is nonzero modulo p. Then (I43|) says that either 

= ord p (P 2 (Pw)) > -3ord p ( 7 ) or = ord p (P 3 (Pw)) > -3ord p ( 7 ), 
and hence ord p (7) > 0. □ 

10. A p-ADIC LIMIT OF ELLIPTIC DIVISIBILITY SEQUENCES 

In this section we apply our results on division polynomials to par- 
tially prove the following conjecture about elliptic divisibility sequences. 

Conjecture 19. Let W = (W n ) n > be an elliptic divisibility sequence 
and let p be a prime. Then there is an exponent N = N p > 1 so that 
for every m > 1, the limit 

lim W mp kN 

converges in Z p to a number that is algebraic over Q. 

We are able to prove this conjecture for "most" elliptic divisibility 
sequences and for "most" primes. 

Theorem 20. Let W = (W n ) n >o be a general elliptic divisibility se- 
quence. Let Pw be the associated elliptic curve, given by a minimal 
Weierstrass equation over Q, let Pyy £ Pyv(Q) be the associated ratio- 
nal point, and let Sw be the set of primes p satisfying any one of the 
following conditions: 
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• p = 2. 

• P w = O (mod p) . 

• Pyy mod p is a singular point on Eyy mod p. 

• Eyy mod p is super singular. 

Then Conjecture f"H^ is true for W /or all primes p ^ S>V; that is, there 
is an exponent N = N p > 1 so that for every m > 1, the limit 

lim W mp kN 

k^oo 

converges in 7L V to a number that is algebraic over Q. 

In particular, if Eyy does not have complex multiplication, then Con- 
iectureYnhis true for almost all primes in the sense of density, since Syy 
has density 0. (If Ew has CM, then SVv has density ~.) 

Proof. We use Proposition [THl to find a 7 £ Q* so that 

W n = 7 n2 " 1 F n (P w ) for all n > 1. (44) 

Proposition ITS1 also tells us that ord p (7) > 0, since we have assumed 
that P>v mod p is nonsingular. On the other hand, our assumption that 
P w ^ O (mod p) implies that ord p (F n (Pyv)) > 0, so if ord p (7) > 0, 
then 

ord p (H / n ) > (n 2 — 1) ord p (7) — > 00 as n — > 00. 

Thus if ord p (7) > 0, then lim^oo W n = in Z p . 

We are thus reduced to the case that 7 £ Z* Then for any m > 1, 

lim 7 mpfc ~ 1 = x(7) m 7 _1 in Z p , 

where ^ /V-i is the value of the Teichmuller character. Us- 

ing ([44)1. it thus suffices to prove there is a power g = so that for 
every m > 1, 

lim F m „fc (-Pw) converges in Z p 

and is algebraic over Q. This follows immediately from Theorem 
since our choice of the set Syy was designed to ensure that Theorem H2J 
is applicable to every prime p £ Syy. 

This completes the proof of Theorem |2H except for the final state- 
ments about densities. We note that the first three conditions specify- 
ing primes in Sy\> only include finitely many primes. The fourth con- 
dition, that Eyy (mod p) be super singular, is more serious. However, 
Serre jTTj has proven that for any fixed non-CM elliptic curve E/Q, 
almost all primes give ordinary reduction. (More precisely, the num- 
ber of supersingular primes less than X is 0(X 3//4 ), see 0HE1-) O n 
the other hand, Elkies has shown that there are infinitely many primes 
of supersingular reduction 6], so unfortunately our set Syy is always 
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infinite. Finally, it is well known that an elliptic curve with CM has 
supersingular reduction at precisely the primes that are inert in its 
CM field. □ 

Remark 7. TheoremlT2ltells us when the limit in Theoreml2Ulis nonzero. 
Let r p be the order of Pyy in Ew(F p ), and let q = p N be the power of p 
in Theorem [201 Note that Hasse's theorem J2UJ V.l.l] implies that 
r p < (y/p + l) 2 , so in particular, r p < p 2 under our assumption that 
p^2. 

Writing W n = 7™ ~ l F n (P w ) as in (jUjl. we see that if p\^y, then p\W n 
for all n > 2, in which case W n —> in Z p . On the other hand, if p \ 7, 
then Theorem El implies that the limit in Theorem 120 is zero if and 
only if the p-free part of r p divides m Hence 

lim W mp kN = if and only if either < ^ — ' 

fe^oo lr p |mp. 
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